1
Supabase MCP can leak your entire SQL database
Indirect prompt injection through support-ticket data lets an MCP-enabled assistant cross trust boundaries and query private tables with Supabase’s privileged service role.
Context-aware AI red teaming for agentic systems. Automated adversarial testing plus vulnerability forecasting and runtime controls.
Visit generalanalysis.com → On Hacker News Jul 2025 – Jul 2025
Indirect prompt injection through support-ticket data lets an MCP-enabled assistant cross trust boundaries and query private tables with Supabase’s privileged service role.